hi, you need to remove the domain suffix but you cannot play with the User-Name attribute or the response will be wrong - use the 'stripped-user-name' attribute for the authenticate step - and ensure that if you are querying an LDAP or AD et cin that stage that DOMAIN being used is the correct domain - either overwrite the value or set it to NULL
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html